NEAS[.]e55bbb721424eebd3f14b4039fe158e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e55bbb721424eebd3f14b4039fe158e0.exe
Size

94KB
MD5

e55bbb721424eebd3f14b4039fe158e0
SHA1

e335d9e6fcebdccee4d57d84bc6a01505d074411
SHA256

02f736639c4827597c02246f14e3a09f48ecfd6e751ca8830ace9ddf67c863dc
SHA512

b1420dfda0d2e7c6b00d214c73454070b23f1da27dcdb6a78c147691e09836f08df87818aae074110640c6b57bfcd3ca54d19d6a8f743fb82207ec22f9a33812
SSDEEP

1536:ja+CH4Gz+1GRpICwv3FQcwR1U4M5V4Fkr9Iv7+rcD8k4pv1GecufL2rTJGSR29Fm:i9zzIXPFQcw/U4MYc9Iv7pmV0e1fyrTx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e55bbb721424eebd3f14b4039fe158e0.exe

Files

NEAS.e55bbb721424eebd3f14b4039fe158e0.exe
.exe windows:4 windows x86

8eb009a9f5f80d2402df6b091239f9e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord556
ord669
ord705
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord648
ord100
ord432

netshell

DllGetClassObject

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ